Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/34E706EC241A11ED858D220EC4F9AE02.roa
File:                     34E706EC241A11ED858D220EC4F9AE02.roa (raw, json)
Hash identifier:          z/qBd9jvfFs3MVtlNwLo2j4bgFWjaW0eeH7DYfWPcns=
Subject key identifier:   86:03:91:B0:40:48:DA:EC:7B:31:C4:EB:7F:33:9A:2D:0D:5F:F5:C4
Certificate issuer:       /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial:       02
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/34E706EC241A11ED858D220EC4F9AE02.roa
Signing time:             Thu 25 Aug 2022 02:04:10 +0000
ROA not before:           Thu 25 Aug 2022 02:04:09 +0000
ROA not after:            Fri 31 Mar 2023 00:00:00 +0000
asID:                     133178
IP address blocks:        103.82.168.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
        Validity
            Not Before: Aug 25 02:04:09 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=6306d899-98c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:63:6d:aa:98:b8:ff:9f:d9:bf:84:a0:d2:
                    39:f4:9f:d2:dd:ed:7c:b6:e4:22:bc:0a:2f:46:8e:
                    2e:17:46:4e:70:15:89:2b:33:08:77:29:9f:63:00:
                    ff:51:41:c6:50:98:b1:cc:bd:e0:0b:ce:42:6f:02:
                    09:cb:e7:c5:c1:2f:a8:bd:5a:c6:04:d8:10:59:1b:
                    ba:0f:b4:5d:ef:2c:8a:f2:a9:aa:8d:22:b2:73:22:
                    f5:eb:7a:08:6f:d5:c9:f3:fb:bf:c2:e2:7c:08:60:
                    96:78:e1:e9:5d:e4:e8:f6:e8:04:4f:21:4c:fa:58:
                    90:74:d1:d2:ce:27:06:52:9c:e1:43:3d:4b:6c:7b:
                    fd:4b:93:26:7f:11:af:b2:46:b5:fc:20:74:d5:75:
                    13:51:f4:d4:80:95:af:f6:24:8d:8c:e2:89:4d:1d:
                    f7:1d:36:98:60:50:09:fa:37:ed:f6:cf:40:4c:1f:
                    08:01:09:5e:0f:12:b5:50:4e:e2:fc:cf:6b:15:3f:
                    56:30:a7:18:d5:94:45:86:df:b0:a1:b6:22:6d:71:
                    b8:87:ea:e9:1b:96:72:7f:ba:05:63:42:32:db:bc:
                    c6:8b:e4:f3:97:1e:96:36:58:d7:30:b5:da:62:e3:
                    a4:3a:eb:b8:28:c1:c7:43:aa:e2:d4:fe:40:c5:c6:
                    67:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:03:91:B0:40:48:DA:EC:7B:31:C4:EB:7F:33:9A:2D:0D:5F:F5:C4
            X509v3 Authority Key Identifier:
                keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/34E706EC241A11ED858D220EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:84:3d:b7:22:d0:34:11:ec:e6:9d:00:cb:e1:92:e6:43:8b:
         87:a1:67:ef:58:61:a1:05:5b:72:09:7d:92:fc:22:a4:23:be:
         ce:dc:42:cb:cf:d6:e1:11:8e:9e:bd:af:b1:1b:89:01:9a:82:
         e1:75:b1:83:38:6c:23:e9:23:60:19:98:b6:37:f7:ed:5d:20:
         3a:2f:b6:f9:4e:68:2c:3d:c1:ae:be:5f:dc:f5:e5:ab:44:ad:
         71:ff:40:10:f3:2a:82:6e:2f:8f:1d:ba:af:c7:40:73:c2:85:
         c8:c3:d7:6d:44:34:08:47:bf:6b:4a:cd:1b:de:0a:96:ff:61:
         37:c3:eb:3e:12:d1:1a:43:2b:23:b4:a2:e1:e6:36:6d:12:4b:
         ad:35:c8:2f:5a:a6:29:25:5d:4e:ef:d2:1d:4e:c6:c8:89:e0:
         24:16:1c:08:0b:e1:fd:23:b4:4b:75:84:45:bf:2c:9d:de:e1:
         f7:86:04:d7:ad:c7:dd:db:28:da:4a:88:5d:d4:87:94:94:a0:
         37:71:8c:9b:d6:dc:bb:54:81:05:75:42:9c:01:2a:67:e9:5b:
         c6:aa:77:be:ac:4b:e4:5a:90:58:8c:fc:50:f2:73:25:10:73:
         6d:aa:e4:4d:ff:f5:09:9f:6b:91:a2:87:d6:93:76:be:fb:b8:
         77:08:f7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----